Novell Groupwise Messenger vulnerabilities

6 CVEs affecting Novell Groupwise Messenger, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1085, published 2013-03-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-0992, published 2006-04-14. High severity, CVSS 10.0. EPSS: 73.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. …
CVE-2008-2703, published 2008-06-13. High severity, CVSS 10.0. EPSS: 61.1% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that…
CVE-2013-1085, published 2013-03-29. High severity, CVSS 9.3. EPSS: 5.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute…
CVE-2006-4511, published 2006-10-05. Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days. Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val…
CVE-2008-2704, published 2008-06-13. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, possibly involving a popup alert. NOTE: it is not clear…
CVE-2011-3179, published 2011-12-08. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted…